Staff Security Engineer

NYC. Posted yesterday

The role

You will be the first US security engineer at rho, a banking platform for startups and growth-stage companies. You will write production code most days, own product and platform security, and own finding queues and incident response.

What you will do

Threat model new systems and review designs with the teams that own them before they ship.
Build secure defaults, guardrails in CI, and dependency and supply chain checks.
Own the vulnerability lifecycle: triage findings, hold the SLAs, write or get fixes written, and track remediation to zero.
Stand up the vulnerability disclosure program.
Harden GCP and GKE with least-privilege IAM, workload identity, secrets, network policy, and environment separation, all in Terraform.
Secure LLM, agent, and MCP surfaces with guardrails, sandboxes, scoped agent identities, and prompt injection detection.
Own detections in the SIEM, tune signal to noise, and keep runbooks current.
Stand on the call rotation and lead incidents end to end, including post-mortems.
Run tabletop exercises and hunt for what detections miss.

Required qualifications

6+ years in security engineering, or software engineering with a security focus.
Ships code and tools, not only findings.
Depth in one of product security, cloud and platform security, or detection and response, and working knowledge of the other two.
Comfortable changing production and owning the outcome.
Python or Go, Kubernetes, Terraform, and one major cloud.
Able to triage competing risks and trade security against velocity.
Clear writer: design reviews, runbooks and incident reports engineers read.

Nice to have

Fintech, payments or another regulated industry.
PCI DSS or SOC 2 evidence work.
Bug bounty, red team, CVEs, talks, or open source.
Hands-on AI security: guardrails, agent identities, prompt injection.

Before you apply

The team plans to grow over the next six months, and the hire will help choose who joins.

About the company

Rho is a modern banking platform for startups and growth-stage companies, offering accounts, cards, expense management, bill payments, and bookkeeping in one platform. Its customers run their banking, cards, and payments through Rho.